$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: QgtPsYUcvi5Yj5ExJtbkHOy+BoL8OYLgwaUHIPtB390= Subject key identifier: 71:87:70:DD:70:0F:D6:33:44:60:AE:8F:88:B1:92:C4:49:37:53:DF Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 0197C6140DABA6E7136E6F91A96ED0DA949A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 155B Signing time: Tue 01 Jul 2025 13:01:32 +0000 Manifest this update: Tue 01 Jul 2025 13:01:32 +0000 Manifest next update: Wed 02 Jul 2025 13:01:32 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: hlYzbppmr9vumMM0VCZd1/DiShiaK4FTue/dcIz7llg=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa (hash: qNV/P5sCJuhJ/7lvmy6L/P1vDN6QSvQRrwuS+5DqKkg=) 16: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 17: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c6:14:0d:ab:a6:e7:13:6e:6f:91:a9:6e:d0:da:94:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jul 1 13:01:32 2025 GMT Not After : Jul 2 13:01:32 2025 GMT Subject: CN=718770dd700fd6334460ae8f88b192c4493753df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:c8:1e:eb:c7:ce:b9:c8:4e:a8:e5:ca:e3: 13:f2:81:6a:6f:02:ab:ad:3c:b8:86:52:61:ef:04: 5d:7c:2d:82:10:15:39:92:ba:a4:02:26:96:bf:f3: 8c:41:bd:26:40:26:07:04:03:c4:06:52:cd:24:69: d1:e7:93:4f:36:06:d2:4f:24:81:4a:b2:8c:af:a2: c3:5d:17:af:fd:e4:63:86:54:60:f1:0f:ea:9c:36: 86:de:2f:8b:30:0e:c7:da:20:12:31:b0:45:da:0b: dc:a2:cb:5f:99:2b:91:cb:05:d2:5a:28:0b:71:4b: 50:b3:f8:8f:98:c5:c2:ca:0b:19:c8:9d:f3:a5:66: 67:2d:c9:e8:f7:cb:c0:19:52:43:74:87:05:95:33: 7a:d7:f0:eb:28:f7:b1:17:34:9d:a0:25:ee:22:7c: 6c:26:00:2e:ee:51:5e:c9:ea:fa:83:c0:f5:5b:6f: 15:1f:02:70:4d:ef:c6:23:19:7d:25:1f:40:58:33: ab:6f:20:6e:34:1e:c8:a6:1d:47:8f:59:4b:4b:10: ba:81:67:25:5f:3e:de:2b:df:1c:bb:eb:31:bf:a1: ae:2f:4d:ed:d7:b8:ef:6c:85:36:cd:40:8b:dc:61: 79:1a:e5:29:84:ff:0c:32:81:e7:5f:f9:26:9e:de: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:70:DD:70:0F:D6:33:44:60:AE:8F:88:B1:92:C4:49:37:53:DF X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:db:22:ec:2d:6f:04:9e:94:43:fd:1e:62:54:73:42:04:9c: 54:8e:0c:ab:ec:5d:8a:07:78:8a:16:d4:5c:d7:8f:29:64:22: 41:6c:eb:2b:f1:46:d1:63:fa:16:e2:7f:31:48:ea:82:a1:b4: eb:d4:6c:a1:ad:5e:61:62:d0:15:b2:76:12:4e:8c:92:a8:a7: 14:9d:f3:34:9a:90:d6:30:4c:7d:c9:46:2e:30:3e:27:c2:b8: f3:19:45:b8:15:08:a2:aa:55:13:9a:97:89:69:20:de:4d:75: 61:eb:2f:1a:31:22:74:28:26:9d:ab:d2:15:e9:3e:91:9b:bb: 81:5b:48:7a:11:72:df:af:d6:08:a7:92:71:a3:cb:c6:64:a0: 5c:4a:01:a6:65:70:c9:68:cb:98:36:9e:8d:ff:03:d7:08:ae: 3e:60:52:94:03:ec:58:51:ba:78:e0:9a:1d:e4:15:33:29:33: d1:6d:2e:ff:f3:05:8f:81:ab:74:f0:aa:35:1b:16:f5:ec:d2: 27:4e:0d:a9:9e:03:7f:a4:ea:11:09:fa:74:1f:b2:c7:7e:c8: c5:94:a7:72:8d:55:5f:2e:b9:87:a5:bf:1f:cf:0d:f1:ef:64: 7e:4e:8e:12:56:da:11:d9:b4:08:00:e3:d6:26:b9:75:4f:7e: 00:29:da:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfGFA2rpucTbm+RqW7Q2pSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwNzAxMTMwMTMyWhcNMjUwNzAyMTMwMTMyWjAzMTEwLwYDVQQD Eyg3MTg3NzBkZDcwMGZkNjMzNDQ2MGFlOGY4OGIxOTJjNDQ5Mzc1M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte7IHuvHzrnITqjlyuMT8oFqbwKr rTy4hlJh7wRdfC2CEBU5krqkAiaWv/OMQb0mQCYHBAPEBlLNJGnR55NPNgbSTySB SrKMr6LDXRev/eRjhlRg8Q/qnDaG3i+LMA7H2iASMbBF2gvcostfmSuRywXSWigL cUtQs/iPmMXCygsZyJ3zpWZnLcno98vAGVJDdIcFlTN61/DrKPexFzSdoCXuInxs JgAu7lFeyer6g8D1W28VHwJwTe/GIxl9JR9AWDOrbyBuNB7Iph1Hj1lLSxC6gWcl Xz7eK98cu+sxv6GuL03t17jvbIU2zUCL3GF5GuUphP8MMoHnX/kmnt6Z/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGHcN1wD9YzRGCuj4ixksRJN1PfMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9si7C1v BJ6UQ/0eYlRzQgScVI4Mq+xdigd4ihbUXNePKWQiQWzrK/FG0WP6FuJ/MUjqgqG0 69Rsoa1eYWLQFbJ2Ek6MkqinFJ3zNJqQ1jBMfclGLjA+J8K48xlFuBUIoqpVE5qX iWkg3k11YesvGjEidCgmnavSFek+kZu7gVtIehFy36/WCKeScaPLxmSgXEoBpmVw yWjLmDaejf8D1wiuPmBSlAPsWFG6eOCaHeQVMykz0W0u//MFj4GrdPCqNRsW9ezS J04NqZ4Df6TqEQn6dB+yx37IxZSnco1VXy65h6W/H88N8e9kfk6OElbaEdm0CADj 1ia5dU9+ACna2A== -----END CERTIFICATE-----Generated at Tue Jul 1 14:29:49 2025 by rpki-client